add sign out and modify auth_user